Solved

DNS error 32 attempting to load zone

Posted on 2011-02-15
3
2,044 Views
Last Modified: 2012-05-11
Event Type:      Warning
Event Source:      DNS
Event Category:      None
Event ID:      4521
Date:            2/15/2011
Time:            2:35:22 PM
User:            N/A
Computer:      MARS
Description:
The DNS server encountered error 32 attempting to load zone . from Active Directory. The DNS server will attempt to load this zone again on the next timeout cycle. This can be caused by high Active Directory load and may be a transient condition.


The thing that looks strange to me, the _msdcs under domainname.local is grayed out. I have been through SEVERAL posts and forums trying to find a solution to this problem and no luck.
0
Comment
Question by:gwermter
  • 2
3 Comments
 
LVL 7

Accepted Solution

by:
BobintheNoc earned 500 total points
ID: 34900295
If there is corruption within DNS portion of AD, probably the simplest thing to do is to delete the zone and allow the DC to recreate it.  The re-creation will be automatic, as soon as a DC attempts to register it's SRV records.  Once the zone has been recreated, it'd be good to restart NETLOGON on all other DCs and Member servers so that they reregister their appropriate records.

Otherwise, you might be looking at having to do an Authoritative Restore after restoring the system state of one of your DCs from a backup prior to the failures.
0
 

Author Comment

by:gwermter
ID: 34900465
It would be considered ok to delete the primary zone in DNS?
0
 
LVL 7

Expert Comment

by:BobintheNoc
ID: 34903581
Safe is a relative word.  There will be a timeframe while the zone is being recreated and it will take a bit of time for each client to reregister.  During this time, DNS queries may not return results.  

How many DCs do you have and how large is your environment?  If you're an enterprise, this could be bad to do during production time.   If you're a small environment, you can be recovered within 10 minutes or so--especially if you stage your member machines to reregister right after the zone is recreated when you have a DC reregister itself.  If you've got multiple sites, replication links may fail.

In a flat, non-segmented/non-vlan'ed network, Windows is amazingly resilient when DNS doesn't function fully.  NETBIOS/Mailslots announcements are generally limited to the local subnets only.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question